Home > Information Security Tips > Threat Monitor > An enterprise strategy for Web application security threats
Information Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

THREAT MONITOR

An enterprise strategy for Web application security threats


Hugh Thompson, founder, People Security
10.01.2009
Rating: --- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


Application vulnerabilities present a very real, significant threat to business, and even if a network is secure, your applications may not be. So why have enterprises been slow to invest in application security, and what particular attacks should security professionals be focusing in on? And what tools and technologies should be used to fight common threats like buffer overflows and cross-site scripting?

Hugh Thompson, founder of People Security, looks beyond the OWASP Top Ten and reveals the essentials of any enterprise application security strategy. Thompson talks about the role of Web application firewalls, security assessments and the development team itself in the creation of secure software.

View more videos in our Security Video Library.

Rate this Tip
To rate tips, you must be a member of SearchSecurity.IN.
Register now to start rating these tips. Log in if you are already a member.




Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Application and Web threat defenses
How to address HIPAA data encryption security challenges
Noted cryptographer on SSL, encryption and cloud computing
Considering two-factor authentication? Do cost, risk analysis
Clientless SSL VPN vulnerability and Web browser protection
11 application security tweaks for a secure SDLC
Fraudulent mobile applications will threaten mobile banking security
Mobile Reputation Security prototype from Symantec: A closer look
A botnet and rootkit removal 101
Microsoft warns that IE zero-day vulnerability causes data leakage
What to do with network penetration test results

Hacking countermeasures
How to address HIPAA data encryption security challenges
Vulnerability management gets in-house treatment at AXA Business Services
Gartner's server virtualization security risk list
Noted cryptographer on SSL, encryption and cloud computing
Two factor authentication gets token agnostic at Central Bank of India
Considering two-factor authentication? Do cost, risk analysis
PCI tokenization push promising but premature, experts say
Clientless SSL VPN vulnerability and Web browser protection
How to perform an Active Directory health check
Information rights management helps L&T protect its knowhow

Viruses, worms, spyware, and other malware
Vulnerability management gets in-house treatment at AXA Business Services
Gartner's server virtualization security risk list
Clientless SSL VPN vulnerability and Web browser protection
Cloud Security Alliance releases top cloud computing security threats
Zeus Trojan continues reign infecting 74,000 PCs in global botnet
Fraudulent mobile applications will threaten mobile banking security
Mobile Reputation Security prototype from Symantec: A closer look
Configuring a Windows network infrastructure: Wired, wireless security
A botnet and rootkit removal 101
Microsoft warns that IE zero-day vulnerability causes data leakage

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
man-in-the-middle (MitM) attack  (SearchSecurityIN.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.

HomeNewsTopicsITKnowledge ExchangeTipsMultimediaWhite Papers
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2009 - 2010, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts